IN THE CLAIMS 

A listing of all claims and their current status in accordance with 37 C.F.R. § 1.121(c) 
is provided below. 

1-55. (canceled) 

56. (currently amended) A method for providing multi-class processing of login 
requests comprising: 

associating a login cookie class with a login cookie; and 
providing a level of service to login attempts associated with the login cookie 
based on the login cookie class of the login cooki e: and 

requiring a longer time delay for a second-class login cookie than for a first- 
class login cookie between an invalid login attempt and allowing a subsequent login 
attempt . 

57. (canceled) 

58. (currently amended) The method of claim 56 wherein providing a level of service to 
login attempts associated with the login cookie based on the login cookie class of the login 
cookie further comprises: 

invalidat e s invalidating t he subsequent login attempt for the second-class login before 
a user name and password are processed responsive to the subsequent login attempt being 
performed before the expiration of the longer time delay. 
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59. (currently amended) The method of claim 56 wherein providing a level of service to 
login attempts associated with the login cookie based on the login cookie class of the login 
cookie further comprises: 

serializing login attempts made without a first class login cookie designated as first- 
class . 

60. (currently amended) The method of claim 56 wherein providing a level of service to 
login attempts associated with the login cookie based on the login cookie class of the login 
cookie fiirther comprises: 

providing a limit e d numb e r of invalid, conaocutiv e login attempts for a class of login 
cooki e ; and 

responsive to no invalid consecutive login attempts since a previous valid login ^ 
limit e d number b e ing zero , associating a different class of login cookie with a more 
preferential level of service with the login cookie. 

61 . (previously presented) The method of claim 56 wherein providing a level of service to 
login attempts associated with the login cookie based on the login cookie class of the login 
cookie fiirther comprises: 

processing a login attempt associated with a class with a less preferential level of 
service at a slower defined rate than another class with a more preferential level of service 
based on a login state which defines a rate at which a server can process login attempts. 

62. (currently amended) A computer program product for use in conjunction with a computer 
system, the computer program product comprising a computer readable storage medium and a 
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computer program mechanism embedded therein, the computer program mechanism 
comprising: 

instructions for associating a login cookie class with a login cookie; and 

instructions for providing a level of service to login attempts associated with the login 

cookie based on the login cookie class of the login cookieiand 

instructions requiring a longer time delay for a second-class login cookie than for a 

first-class login cookie between an invalid login attempt and allowing a subsequent login 

attempt . 

63. (new) A method for providing multi-class processing of login requests to resist 
xmauthorized access attempts comprising: 

providing a client with a first-class login token when the client successfully logs into 
an account, wherein the first-class login token entitles the client to one or more unsuccessful 
login attempts without requiring a delay between the unsuccessful login attempts; 

requiring a delay between attempts to log into the accoimt if a second-class login 
token or an expired first-class login token is utilized by the client; and 

rejecting login attempts by the client when the client does not utilize any class of login 

token. 

64. (new) The method of claim 63, comprising providing the client vsdth the second-class 
login token for a subsequent login attempt if the client does not utilize any class of login 
token. 
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